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PREFACE 


This  Note  identifies  a  factor  that  appears  to  have  been  neglected 
in  explaining  the  discrepancy  between  predicted  satellite  lifetimes  and 
observed  satellite  lifetimes  in  orbit.  This  factor — extension  of  sat- 
elite  life  through  ingenious,  ad  hoc  "work-around"  corrections— is 
described  analytically,  and  an  approach  for  including  it  in  existing 
satellite  replenishment  models  is  discussed.  The  Note,  which  derives 
from  work  originally  conducted  under  Project  AIR  FORCE’S  "Spacecraft 
Acquisition  Strategies"  study,  was  circulated  in  May  1978  as  a  working 
paper.  Its  reissuance  in  its  present  form — to  reach  a  wider  audience — 
has  been  delayed  by  the  unavailability  of  the  authors  for  the  necessary 
rewriting  and  by  the  press  of  other  work. 
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SUMMARY 


The  ingenious  ways  in  which  satellite  designers,  managers,  and 
system  controllers  correct  satellite  malfunctions  and  anomalies 
which  would  otherwise  result  in  satellite  failure  are  not  represented 
in  current  satellite  replenishment  models.  In  this  Note  the  effect 
of  this  omission  on  various  measures  of  system  performance  is  explored, 
an  analytical  method  of  incorporating  these  "work-arounds"  in  current 
replenishment  models  is  developed,  and  an  initial  estimate  of  the 
required  parameters  is  derived  from  a  convenient  data  base.  It 
was  found  that  incorporating  the  effect  of  work-arounds  dramatically 
improves  system  performance  and  lowers  procurement  requirements.  A 
more  definitive  study  is  suggested  to  provide  the  data  needed  by 
program  managers  to  confidently  include  the  effect  of  work-arounds  in 
their  replenishment  studies. 
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I .  INTRODUCTION 


Within  the  satellite  design,  acquisition,  and  system  management 
community  the  term  "work-around"  refers  to  the  ingenious  ways  in 
which  satellite  designers,  managers,  and  system  controllers  correct 
satellite  malfunctions  and  anomalies  which  would  otherwise  result  in 
satellite  failure.  The  dedication  and  expertise  of  personnel  at 
SAMSO,  Aerospace  Corporation,  and  the  Air  Force  Satellite  Control 
Facility  and  Test  Center  frequently  enable  satellites  to  function 
beyond  their  expected  life  through  such  work-arounds.  However,  this 
effect  is  nowhere  included  in  the  usual  satellite  replenishment 
models  which  are  used  to  support  satellite  procurement  requirements. 
The  purpose  of  this  Note  is  to  describe  the  effect  of  work-arounds 
on  effective  satellite  reliability  and  on  system  procurement  require¬ 
ments,  and  to  suggest  a  way  in  which  this  effect  can  be  incorporated 
into  current  replenishment  models — specifically  the  Aerospace  Corpora¬ 
tion's  Generalized  Availability  Model,  GAP,  and  SAMSO(YAP)'s  Life 
Cycle  Cost  and  Orbital  Spares  Model.  To  accomplish  this,  it  is 
necessary  to  inquire  in  more  depth  what  the  functions  involved  in 
work-arounds  are  for  satellites  in  orbit ;  how  such  functions  are 
executed;  and  the  degree  to  which  they  are  susceptible  to  some 
form  of  standardization  so  that,  if  desirable,  the  procedures 
can  be  made  routine. 
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II.  REPRESENTATION  OF  SATELLITE  LIFETIMES 
IN  CURRENT  REPLENISHMENT  MODELS 


Current  replenishment  models  generate  representations  of  satellite 
lifetime  by  using  random  numbers  in  conjunction  with  various  reliability 
functions.  For  instance,  Rand's  Satellite  Availability  Simulation 
Program  uses  two  reliability  functions — one  for  satellite  life¬ 
time  as  determined  by  the  piece-part  reliability  function,  and  one  for 
satellite  lifetime  as  determined  by  wear-out  phenomena — using  the  minimum 
of  the  two  simulated  lifetime  numbers  to  represent  satellite  lifetime. 
Aerospace  Corporation's  Generalized  Availability  Program  (Ref.  1)  is 
similar,  but  adds  a  likelihood  that  infant  failures  will  dominate 
the  other  two  numbers,  i.e., 

(l)  r  =  pr.  +  (l  -  p)RpRw 

where  p  =  probability  of  infant  failure, 

R  (t)  =  piece-part  reliability  function, 

P 

Rw(t)  =  wear-out  reliability  function, 

R^  =  infant  reliability  function. 

Often,  R  will  consist  ot  the  product  of  reliability  functions  for 
P 

various  payloads,  and  GAP  includes  the  ability  to  generate  satellite 
life  assuming  a  criterion  that  m  out  of  n  payloads  survive. 

For  the  purposes  of  this  paper,  the  simplest  case  will  be  assumed 
in  which  there  is  a  single  payload  whose  lifetime  is  entirely  charac¬ 
terized  by  the  piece-part  reliability  function,  R^(t).  The  operation 
of  current  replenishment  models  is  then  illustrated  in  Fig.  1,  which 
shows  the  piece-part  reliability  function. 

As  shown  in  Fig.  1,  conventional  models  generate  a  random  num¬ 
ber  which  is  uniformly  distributed  on  the  interval  [0,  1.0].  This 
number  is  transformed  through  the  inverse  of  the  reliability  function 
into  a  single  number  representing  the  age  of  the  satellite  at  the 
time  of  failure. 


Lifetime  (months) 


Simulated 
lifetime 

Fig.  1 — Satellite  lifetime  generation  in  current  replenishment  models 
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III.  THE  EFFECT  OF  WORK-AROUNDS 


Work-arounds  have  the  effect  of  permitting  a  satellite  to  "fail" 
more  than  once  and  to  continue  operating  until  a  failure  occurs  which 
cannot  be  worked  around.  The  effect  is  shown  in  Fig.  2  for  the  case 
of  two  successful  work-arounds.  In  general,  to  represent  this  situa¬ 
tion  the  reliability  function  of  the  satellite,  R^(t),  given  k  work¬ 
arounds,  must  be  derived  from  the  basic  satellite  reliability  function, 
R(t).  Letting  P^(t)  =  1  -  R(t),  it  can  be  shown  that 


lifetime 


Fig.  2 — Satellite  lifetime  generation  with  work-around  effects 
( two  work-arounds ) 
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and  ^Ti,Ti+i^  =  t*ie  probability  of  failure  in  the 

i  interval  (T:£»Ti+i)  given  that  a 

work-around  occurred  at  t^. 

This  is  P(t)  conditional  on  the 
occurrence  of  i  work-arounds. 


It  is  shown  in  Appendix  B  that  when  the  occurrence  of  work-arounds 
does  not  influence  the  reliability  function,  R(t),  R^(t)  is  given  by  the 
expression 


\<t>  - 

n=o 


This  is  a  reasonable  assumption  if  the  satellite  contains  many  parts  and 

the  work-arounds  compensate  for  only  those  parts  that  have  failed. 

In  the  calculations  which  follow,  it  is  assumed  that  Pf  =  Pf,  i.e.,  the 

1  i  r 

reliability  function  is  such  that  the  work-arounds  do  not  influence  the 

reliability  of  the  satellite.  With  this  assumption,  the  above  integral  can 

be  easily  approximated  using  computer  simulation  techniques,  i.e.,  simply  by 

multiplying  together  N  +1  random  numbers  with  uniform  distribution  on  the 

w 

interval  [0, 1]  and  using  the  result  to  determine  a  satellite  lifetime 
through  the  inverse  of  the  reliability  function,  R(t).  Figure  3  shows 
the  results  of  using  this  technique  to  calculate  the  effective  life  of 
satellites  used  in  a  typical  program  for  various  numbers  of  assumed 
work-arounds.  The  effect  of  incorporating  work-arounds  dramatically 
changes  the  effective  reliability  of  the  satellite.  For  this  real-world 
example,  one  work-around  effectively  increases  satellite  mean- 
life  by  a  factor  of  1.7;  two  work-arounds  increase  it  by  7.3,  as  shown 
in  Table  1.  As  a  gross  rule  of  thumb,  procurement  requirements  vary  as 
the  inverse  of  the  ratio  provided  in  this  table.  The  procurement  require¬ 
ments  shown  in  Table  1  are  based  on  the  simple  rule  of  thumb  shown  in 
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Table  1 

EFFECTIVE  MEAN  SATELLITE  LIFE  AS  A  FUNCTION 
OF  THE  NUMBER  OF  WORK-AROUNDS3 


Number  of 
Work-arounds 

Mean 

Satellite 
Life  (mo.) 

Ratio*3 

Satellites  for 

4  Satellite  Systems0 

0 

34.6 

1/1 

14 

1 

59.5 

1.7/1 

8 

2 

80.9 

2.3/1 

6 

3 

100.3 

2.9/1 

5 

4 

118.3 

3.4/1 

4 

5 

135.3 

3.9/1 

4 

This  table  provides  the  mean  of  the  work-around  distribu¬ 
tion  of  the  reliability  function  shown  in  Fig.  1. 

bThe  ratio  of  mean  satellite  life  with  work-arounds 
to  mean  satellite  life  with  no  work-arounds. 

c 

For  10  years  of  operation,  assuming  perfect  satellite  launch/ 
initialization  probability,  and  all  satellites  have  the  same 
number  of  work-arounds. 


—  8— 


Equation  (2)  and  do  not  include  considerations  of  system  performance 
such  as  system  availability,  expected  maximum  system  outage,  etc. 


(2) 


T  •  Nsta 
PL  •  MMD 


In  Eq .  (2),  N  =  the  number  of  satellites  required, 

T  =  the  duration  of  the  program, 

Nsta  =  the  number  of  orbital  stations 
that  must  be  operational  to 
meet  mission  requirements, 

PL  =  the  satellite  launch/initial- 
ization  probability, 

MMD  =  the  satellite  mean-mission  duration. 


Thus,  when  work-around  effects  are  considered,  the  effective  mean- 
mission  duration  depends  on  the  number  of  work-arounds  expected  per 
satellite.  This  modifies  the  rule  of  thumb  provided  in  Eq.  (2). 

A  version  of  Eq.  (2)  which  incorporates  the  effect  of  work-arounds 
is  provided  in  Appendix  A.  Also,  it  is  important  to  note  that  compari¬ 
sons  of  achieved  satellite  life  vs.  predicted  satellite  life  uhich  fail 
to  consider  the  effect  of  uork-arounds  may  lead  to  spurious  conclusions 
about  the  efficacy  of  satellite  reliability  functions  for  predicting 
satellite  lifetimes. 
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IV.  ESTIMATING  THE  INCIDENCE  OF  WORK-AROl'NDS 


In  this  section  we  estimate  the  frequency  of  occurrence  of  work¬ 
arounds  assuming  that  work-arounds  are  generated  by  a  Poisson  process, 
i.e.,  for  a  given  satellite  the  number  of  work-arounds  experienced, 
n,  is  governed  by 


P(n) 


/ ,  v  n  —  X 

=  — —  n  = 


max 


X  >  0 


A  high  confidence  estimate  of  the  work-around  distribution,  P(n), 
n  =  should  be  derived  from  a  comprehensive  review  of  U.S. 

satellite  experience,  and  is  recommended  in  Section  VII.  Lacking  this, 
we  derive  a  preliminary  estimate  of  X  for  the  Poisson  distribution 
using  a  convenient  data  base  consisting  of  ten  programs  which  include 
25  satellites  for  a  total  of  50.9  orbit  years,  as  shown  in  Table  2. 

Of  the  35  major  anomalies  shown,  18  meet  the  criteria  for  work-arounds 
listed  in  Section  VII  below.  For  this  sample,  then,  there  are  18  work¬ 
arounds  for  35  satellite  orbit  years  or  for  25  satellites.  The  Poisson 
parameter  is  therefore  estimated  to  be: 


X  =  18/(611/12)  =  0.35  work-arounds  per  orbit  year,  or 
X  =  18/25  =  .72  work-arounds  per  satellite. 


Judging  from  Table  1,  this  value  of  X  can  be  expected  to  significantly 
affect  satellite  procurement  requirements.  A  more  complete  and  accu¬ 
rate  discussion  of  this  effect  is  provided  in  Section  VI. 


* 

Standardization  and  Program  Practiaes  Analysis — Final-  Report, 

Aerospace  Corporation  Report  No.  ATR-77(7353-01)-l ,  Vol.  II,  March 

1977. 
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V.  SIMULATING  THE  EFFECT  OF  WORK-AROUNDS 


Incorporating  the  effect  of  work-arounds  into  the  lifetime  number 
generator  in  current  satellite  replenishment  models  appears  to  be  quite 
easy.  Each  time  such  a  number  is  required  in  the  simulation,  a  two 
step  procedure  is  followed: 

Step  1.  Simulate  the  number  of  work-arounds,  N  ,  the 
satellite  will  experience. 

Step  2.  Generate  N  +1  random  numbers  from  a  uniform 

[0,1]  distribution,  form  the  product,  and  use 
the  result  to  generate  the  lifetime  number 
of  the  satellite. 

This  approach  requires  that  a  probability  distribution,  P(n),  for 
the  number,  n,  of  work-arounds  be  input  into  the  replenishment  model. 
Given  P(n),  this  procedure  is  easy  to  implement  into  existing  satellite 
replenishment  models. 

A  Poisson  distribution  could  be  assumed  for  modeling  Step  1  above; 
i.e.,  the  probability  of  any  given  number,  n,  of  work-arounds  for  any 
satellite  is  given  by: 

n  -A 

(3)  P(n)  =  ,  n  =  0,1,...,- 

where  A  is  the  average  number  of  work-arounds  per  satellite.  This  is 
a  simplifying  assumption  which  requires  only  the  estimation  of  the 
parameter  A  rather  than  the  estimation  of  P(n)  for  every  value  of  n 
in  the  absence  of  such  an  assumption.  One  would  expect  to  find  some 
deviation  from  the  Poisson  due  to  the  upner  limit  on  the  number  of  work 
arounds  per  satellite  which  would  inflate  the  value  of  P(0)  and  reduce 
the  value  of  P(n)  to  zero  for  values  of  n  greater  than  this  upper  limit 
For  values  of  A  derived  later  in  this  paper,  this  deviation  is  insignif 
cant . 

The  effective  reliability  function  given  an  arbitrary  distribution 
of  work-arounds  is  given  by: 


Re(t)  =  R(t) 


N 

max 


n 


13  P(n>  13 

n=0  m=0 


(-lnR(t)]m 


(4) 


m! 


which  is  the  weighted  average  of  R^Ct)  where  the  weights  are  merely 
p(n).  The  effective  reliability  function  for  the  satellite  used  in 
Fig.  2  is  shown  in  Fig.  4. 

EFFECTIVE  SATELLITE  RELIABILITY  AS  A  FUNCTION  OF 
AVERAGE  NUMBER  OF  WORK-AROUNDS 

1.0 

0.9 
0.8 
0.7 
0.6 

PROBABILITY 

0.5 
0.4 
0.3 
0.2 
0.1 
0.0 

TIME  (mo. ) 

Satellite  Reliability  Function,  R ( t )  *  exp  (-t/37.5)1'39 
Maximum  Number  of  Work-arounds /satellite  -  5 
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VI  ■  PROCUREMENT/PERFORMANCE  IMPLICATIONS 


Table  1  provides  a  rough  indication  of  the  effect  of  work-arounds 
on  the  size  of  the  procurement  buy  for  a  typical  four-satellite  system 
with  ten-year  program  life.  A  more  precise  estimate  of  the  effect  on 
system  procurement  and  system  performance  requires  the  use  of  computer 
replenishment  models.  Rand's  Satellite  Availability  Simulation  Model 
has  been  modified  to  incorporate  the  changes  suggested  in  Section  IV. 
The  effect  of  incorporating  work-arounds  depends  on  the  value  of  the 
Poisson  parameter,  X.  Figure  5  shows  the  effect  of  work-arounds  on 
various  measures  of  system  performance  with  X  as  a  parameter  for 
a  typical  satellite  program.  As  expected,  system  performance  in  every 
category  is  improved  when  the  effect  of  work-arounds  is  included.  The 
expected  improvement  for  a  nominal  13-satellite  system  is  shown  in 
Table  3,  as  a  function  of  the  average  number  of  work-arounds.  The 
conclusion  to  be  drawn  from  Table  3  and  Fig.  5  is  that  Air  Force 

Table  3 

SYSTEM  PERFORMANCE  FOR  A  13-SATELLITE  SYSTEM3 


Performance  Parameter 

Average  Number 
Work-Arounds 

of 

Average  Availability  (%) 

_ 0 

68.~5 

X  - 

.5  1.0 

80.5  85.0 

1.5 

88.5 

Expected  Maximum  Outage  (mo) 

11.7 

6.0  4 . 6 

3.5 

Probability  of  Early  Termination  (%) 

9.5 

4.0  1.2 

.7 

Excess  Program  Life  (mo) 

-10.0 

-2.0  5.0 

14.0 

aFour  satellite  system  for  a  10-year  program. 


requirements  based  on  GAP-type  analyses  which  fail  to  include  the 
effect  of  work-arounds  may  seriously  understate  expected  system  per¬ 
formance.  For  example,  to  achieve  an  80  percent  system  availability 
current  methods  of  determining  requirements  would  suggest  that  17 
satellites  are  required  (X  *  0  in  Fig.  5).  However,  when  the  effect 
of  work-arounds  is  included  (X  ■  0.7  in  Fig.  5)  only  12  satellites 
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Number  of  stations  =  4 
Station  start  times  =  0,  2,  4,  6  mo. 
Booster  reliability  =  .87 
Launch  response  time  =  2  mo. 

S/C  initialization  =  0.94 


Piece-part  reliability 

R  ( t )  =  exp  (-t/37.9)1*39 

Wear-out  reliability 

R  ( t )  =  exp  (-t/62.4)6*0 

Number  of  iterations  =  400 


Mi 


Fig.  5 — The  effect  of  the  average  number  of  work- arounds  ( X ) 
on  system  performance 
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are  required.  This  represents  a  savings  of  30  percent  in  the  number 
of  satellites  required,  or  a  dollar  savings  of  roughly  $175  million  for 
this  10-year  program.  Since  GAP-type  analyses — including  the  Integrated 
Life  Cycle  Cost  Model — omit  the  effects  of  work-arounds,  similar 
savings  on  most  of  the  other  satellites  being  procured  by  the  Air 
Force  could  be  realized. 

It  is  important  to  note  that  the  occurrence  of  work-arounds  is 
independent  of  the  satellite  reliability  function,  although  the 
significance  of  the  number  of  work-arounds  depends  directly  on  the 
reliability  function.  Thus,  correcting  the  procurement /decision  pro¬ 
cess  for  the  failure  to  consider  work-around  effects  can  proceed 
independent  of  efforts  to  improve  the  accuracy  of  the  reliability 
function  as  a  predictor  of  satellite  life. 
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VII.  SOME  QUALIFICATIONS  AND  A  PROPOSAL 


The  importance  of  work-arounds  to  satellite  procurement  decisions 
and  satellite  system  performance  is  a  function  of  the  value  of  the 
Poisson  parameter,  X.  For  X  very  close  to  zero,  the  effect  is  negli¬ 
gible;  however,  for  values  as  small  as  X  =  0.2  the  effect  becomes 
significant.  The  estimate  derived  herein  is  only  a  very  rough  esti¬ 
mate,  but  it  indicates  that  a  more  rigorous  estimating  effort  should 
be  pursued  because  the  potential  payoff  to  the  Air  Force  may  be  quite 
high.  Working -level  SAMSO  and  Aerospace  personnel  concur  in  this 
assessment  and  indicate  that  such  a  study  has  not  been  performed. 

A  study  to  provide  such  an  estimate  seems  advisable.  Such  a  study 
would  address  the  following  questions: 

(1)  What  precisely  is  a  ''work-around”?  Obviously  it  refers 
to  activities  and  procedures,  the  effects  of  which  are 
not  captured  by  the  reliability  function,  but  how  can 
the  concept  be  operationalized  for  survey  and  data 
collection  purposes?  In  the  proposed  study  the  fol¬ 
lowing  definition  would  be  used: 

Work-around — a  satellite  malfunction,  anomaly, 
or  part  failure  that  would  result  in  satellite 
failure  or  severe  degradation  of  satellite  mis¬ 
sion  accomplishment  except  for  the  ingenious 
activities  of  satellite  designers,  system  man¬ 
agers,  and  system  controllers  in  compensating 
for  the  problem. 

-  Excludes  parts  failures,  malfunctions  , 
and  anomalies  which  can  be  corrected 
by  switch-over  to  redundant  units  or 
back-up  modes  of  operation  which  are 
captured  in  the  satellite  reliability 
function. 

-  Excludes  parts  failures,  malfunctions  , 
and  anomalies  associated  with  infant 
mortalities,  i.e.,  satellite  failures 
during  the  first  six  months  of  operation. 
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Includes  procedural  and  software  changes 
not  captured  in  the  satellite  reliability 
function. 

Includes  malfunctions,  anomalies,  and  parts 
failures  which  have  minor  effect  on  satel¬ 
lite  mission  accomplishment  but  which  may 
significantly  affect  the  wear-out  charac¬ 
teristics  of  the  system.  (Because  satel¬ 
lite  wear-out  is  rare,  this  type  of  wear- 
out  is  less  important  than  the  other  types 
of  wear-outs.  This  type  will  be  denoted 
as  Category  II  wear-outs  and  the  other, 
more  important  type,  will  be  denoted  as 
Category  I  wear-outs.  It  is  important  to 
make  this  distinction  because  of  the  way 
the  two  types  will  be  used  in  simulation 
models. ) 

(2)  What  is  the  relationship  between  the  number  of  work¬ 
arounds  and  satellite  lifetime?  In  this  paper  the 
implicit  assumption  is  that  the  more  work-arounds  per 
satellite,  the  longer  the  satellite  lifetime.  Are 
there  sufficient  data  to  reject  this  hypothesis?  The 
data  in  Table  2  show  that  14  out  of  35  serious  orbital 
anomalies  occurred  on  four  satellites  in  one  program 
and  the  lifetimes  of  these  satellites  were  signifi¬ 
cantly  less  than  the  design  life.  The  question  of  what 
program/satellite  factors  significantly  influence  the 
incidence  of  orbital  problems  requiring  work-arounds 
should  also  be  addressed.  An  investigation  of  the 
allocation  of  the  scarce  resources  of  the  Technical 
Assistance  Groups  at  Aerospace  Corporation,  which  per¬ 
form  the  work-around  function,  would  be  appropriate. 
Perhaps  this  important  function  is  being  underfunded, 
or  distorted  by  dysfunctional  organizational  incentives. 


(3)  What  is  the  actual  work-around  distribution,  P(n)? 

Is  a  Poisson  approximation  to  P(n)  adequate?  If  so, 
what  value  of  1  should  be  used  in  specifying  satel¬ 
lite  requirements?  Should  X  be  uniform  across  programs 
or  program  specific?  If  program  specific,  what  are  the 
factors  which  determine  the  appropriate  value  of  X 

for  a  given  program?  It  wduld  seem  that  programs 
which  enjoy  higher  priorities  and  can  command  higher 
levels  of  support  from  the  Technical  Assistance  Groups 
and  the  Satellite  Control  Facility  should  use  higher 
values  of  X  in  their  replenishment  calculations  than 
other  programs  less  favorably  endowed. 

(4)  Is  it  possible  in  satellite  system  design  to  enhance 
the  probability  of  successful  work-arounds? 

(5)  Is  it  possible  that  by  incorporating  the  work-around 
concept  into  existing  satellite  replenishment  models 
one  can  derive  a  quantitative  estimate  of  the  intrinsic 
dollar  value  of  the  functions  of  the  Technical  Assis¬ 
tance  Groups  and  the  Satellite  Control  Facility? 

(6)  Assuming  that  the  work-around  distribution  is  a  viable 
concept  which  should  be  incorporated  into  the  deter¬ 
mination  of  Air  Force  satellite  requirements,  how 
should  it  be  done?  What  implementation  steps  should 
be  considered?  What  institutional  and  organizational 
factors  should  be  addressed? 

Work-arounds  are  not  without  costs.  Since  they  involve  software 
and  procedural  changes,  they  affect  support  requirements  placed  by  the 
SPO  on  the  Satellite  Control  Facility.  The  capacity  of  the  Satellite 
Control  Facility  to  service  the  work-around  requirements  of  a  growing 
satellite  population  in  the  next  decade  may  provide  the  ultimate  limit 
on  the  work-around  distribution,  P(n). 

A  study  which  could  answer  the  above  questions  could  be  performed 
at  a  one-man-year  level  of  effort  and  be  completed  in  one  year.  The 
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approach  would  be  to  collect  all  orbital  satellite  failure/anomaly 
reports  for  a  broad  spectrum  of  satellite  programs.  The  failure/ 
anomaly  reports  would  be  screened  to  select  those  which  meet  the 
work-around  definition.  Time  of  work-around  occurrence  and  time  to 
loss  of  function  or  satellite  operation  would  be  noted.  Work-arounds 
would  also  be  categorized  with  the  help  of  Aerospace,  contractu-,  and 
SPO  personnel  according  to  mission  impact.  The  work-around  dis¬ 
tribution,  P(n)  .  would  be  estimated  from  the  resulting  data,  and  the 
impact  of  incorporating  work-arounds  into  the  replenishment  simulations 
for  representative  satellite  programs  would  be  estimated  using  exist¬ 
ing  simulation  models.  The  cooperation  of  the  Air  Staff,  SAMSO/ 
Aerospace,  and  Air  Force  Satellite  Control  Facility/Satell ite  Test 
Center  would  be  essential.  Documentation  would  require  an  additional 
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Appendix  A 

A  SIMPLE  METHOD  OF  DETERMINING 
SATELLITE  REPLENISHMENT  REQUIREMENTS 


This  method  assumes  that  the  work-around  distribution  is  Poisson 
with  parameter  X;  i.e., 


P(n) 


,  n  -X 
X  e 

n! 


n  =  0,  1,  . . .  ,N 


max 


It  is  also  assumed  that  the  satellite  reliability  function  can  be 
expressed  in  the  form  of  a  Weibull  function.  R(t)  =  exp(-t/a)6. 
The  mean  life  of  the  satellite  given  k  work-arounds  is: 


L(k)  =  (o/B) 


k 

E 

n=  0 


T (n+B  X) 
n! 


as  shown  in  Appendix  B. 


Then  the  expected  number  of  satellites  required  is  given  by 


where 

N  =  the  number  of  satellites  required, 

S  =  the  number  of  orbital  stations  required  for  the  space  mission, 

T  =  the  duration  of  the  program, 

P  =  the  probability  of  satellite  launch/initialization, 

L 

e  =  a  correction  factor  which  compensates  for  the  finite  number 
of  work-arounds  a  given  satellite  can  experience,  i.e., 

^max 

e  =  [1  -  I  p(n) ] , 
n=0 

X  =  the  average  number  of  work-arounds  per  satellite, 
a,B  =  the  parameters  of  the  Weibull  approximation  to  the  satellite 
reliability  function. 


v. 


pags 
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This  method  is  suitable  for  implementation  on  programmable  hand 
calculators.  It  is  interesting  to  note  that  this  method  provides 
the  same  results  as  Eq .  (2)  in  Section  III  provided  that  the  MMD  used 
in  that  equation  is  the  MMD  appropriate  for  the  average  number  of  work¬ 
arounds,  X.  Unfortunately  Eq.  (2)  is  incapable  of  handling  situations 
in  which  X  is  not  an  integer,  or  for  large  (>3)  values  of  X. 
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Appendix  B 

DERIVATION  OF  THE  RELIABILITY  FUNCTION  WITH  WORK-AROUNDS 


The  method  of  derivation  is  demonstrated  sufficiently  for  the  case 
of  two  work-arounds  depicted  in  Fig.  2.  First,  choose  a  random  number 
u^  uniformly  distributed  on  the  range  [0,  lj.  The  probability  density 
of  u^  is  just  du^.  Second,  choose  a  random  number  u9  uniformly  distri¬ 
buted  on  the  range  [0,  u^]  corresponding  to  the  second  random  number 
in  Fig.  2.  The  probability  density  of  U£  is  du2/u^,  since  it  must  be 
normalized  to  unity  over  the  range  [0,  u^].  Then  choose  a  random 
number  u^  uniformly  distributed  over  the  range  [0,  u9  ] ,  whose  prob¬ 
ability  density  will  be  du^/u^.  The  simulated  lifetime  of  the  system 
will  be  t(u^),  where  t(R)  is  the  inverse  function  of  R(t),  as  shown 
in  the  figure.  The  expected  value  of  the  lifetime,  T0,  denoting 
two  work-arounds,  is  found  by  averaging  over  the  permissible  values 
of  the  three  random  numbers,  and  is: 


1  ui  u? 


0  0 


Integrate  by  parts  on  u^,  and  we  have: 


u,  =  1 


1  2  11  1 
T2“(lnul )/  zr)  du3  C(u3)  -/dul~H-/  du3  t(u3)‘ 

0^0  U;l  =  00  1  o 

The  integrated  term  vanishes  at  u^  =  1  because  In  1  =  0,  and  at  u^  =  0 
because  the  integral  vanishes  faster  than  In  u^  increases.  Again  inte¬ 


grate  by  parts,  and  we  have: 


u  -  1 


11  11 

=  ~l(lnUl)2/  du3  t(U3)  +l/dU  1  (ln  “if  C(Ul)- 


lut  =  0  0 


As  before,  the  integrated  term  vanishes.  It  is  clear  that  the  same 
process  may  be  applied  if  there  are  k  work-arounds,  with  the  result: 
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Tk = m~  /  dui  (in  u^k  c(ui )  • 

0 

Since  t(u^)  is  the  inverse  function  to  R(t),  the  time  may  be  intro¬ 
duced  as  the  independent  variable  in  the  integral.  The  limits  (0,  1) 
for  u^  become  (°°,  0)  for  t.  There  results: 

V* 

Tk  =  “  kT  f  dt  c(_Cn  R(t))k  dR/dt  • 

0 

We  also  have,  from  the  definition  of  the  reliability  function  R^(t): 

no 

Tfc  -  -  /  dt  t  dRk/dt  , 

0 

because  the  probability  the  system  with  k  work-arounds  survives  to  t 
and  then  fails  is  —  dR^/dt.  Equating  the  two  expressions  yields: 

dRk  (-  iln  R(t))k  dR 
dt  k!  dt 


V 


,1  i  ,  f  '  (“  R(t'))k  dR(t') 

t)  ~  1  +J  dt  k! - IF”  ' 


Still  another  integration  by  parts  yields: 


yo 


i  +  L-il 

1  k? 


R(t') (in  R(t'))1 


t  =  t 


t'  -  0 


f  R(t')  .  k .  Im  <£<':> 


1  + 


R(t)  (-  in  R(t) 
k! 


I"  f  (- 

+  j  dt' 


in  K(t'))k~l  d  R(t') 


(k-1) ! 


dt' 


yj(t)  +  R(t)  (-  in  R(t))k/k!  . 
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This  recursion  relation  may  be  summed,  starting  with  R(J(t>  -  K t  r 
to  yield  the  result  in  the  text: 

yo  -  R(t>  X  Ljn-pJ:  . 

0 

When  the  original  reliability  function  is  a  Weibull  distribution 
the  mean  lifetime  can  be  found  as  a  simple  expression.  With 

R(t)  =  exp  ^  —  ( t /a)  ^  j  , 

the  integrations  for  the  terms  in  the  series  representation  of  R^it) 
yield  gamma  functions,  with  the  result: 


r  Z-.  n! 


For  the  constants  appropriate  to  the  illustrative  program 
described  on  page  13  [a  =  37.9,  &  =  1.39],  we  have  determined  the 
mean  lifetime  from  the  formula  above.  Plotting  the  curves  for  R^Ct) 
and  reading  the  time  when  R^Ct)  =0.5  determines  the  median  lifetime. 
The  results  for  up  to  three  work-arounds  are  listed  in  Table  B.l. 


Table  B.l 

MEAN  AND  MEDIAN  LIFETIMES 


Number  of 
Work-Arounds 

Mean 

Lifetime 

Median 

Lifetime 

o 

34.6 

29.0 

1 

59.5 

55.2 

2 

80.9 

77.2 

3 

100.2 

96.5 

These  results  may  be  compared  to  the  Monte  Carlo  simulations  in 


the  text. 
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